Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AyDHDHBbty4cVjsdB_6uswP47o4.roa
File: AyDHDHBbty4cVjsdB_6uswP47o4.roa (raw, json)
Hash identifier: QyWzcHofozQvo2hSjN/4+JYmrGOdpytWp98CMuuouv0=
Subject key identifier: 03:20:C7:0C:70:5B:B7:2E:1C:56:3B:1D:07:FE:AE:B3:03:F8:EE:8E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018653BFA24929722D95967922693F33F673
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AyDHDHBbty4cVjsdB_6uswP47o4.roa
Signing time: Wed 15 Feb 2023 06:25:13 +0000
ROA not before: Wed 15 Feb 2023 06:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 163.5.105.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:53:bf:a2:49:29:72:2d:95:96:79:22:69:3f:33:f6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 15 06:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0320c70c705bb72e1c563b1d07feaeb303f8ee8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:d6:88:93:98:24:e1:fc:6d:90:a2:29:f5:
cc:ac:d8:54:13:82:78:67:8d:c0:dc:9b:23:bd:2b:
88:64:bc:08:40:54:dd:3a:6a:d9:c0:22:da:da:f2:
17:d3:4a:fd:f5:1a:a9:53:d7:9f:e8:67:29:2b:e6:
f7:f9:7d:54:66:fe:9b:c6:e1:65:dc:b0:66:f3:f6:
d5:c1:b8:b3:9c:eb:2a:66:61:69:21:a0:88:54:a5:
30:b1:cc:35:49:aa:4e:a6:0d:1d:d8:9f:33:1d:6b:
c0:17:29:59:ea:9e:bc:f9:72:4e:21:ff:8f:21:91:
2a:c4:b2:32:c6:f7:72:15:7a:72:0f:16:8f:05:0c:
ab:23:3a:f0:ca:e8:f7:2f:35:6c:c7:89:41:f7:ca:
34:72:6a:f7:d1:9a:16:a4:67:66:24:98:3b:5e:87:
92:b4:f3:cb:61:f5:e4:6b:d6:f9:cc:3c:52:8e:bc:
74:fc:2e:a9:61:66:aa:b3:ae:98:a0:fa:f8:ae:38:
c4:25:47:dd:c8:4c:a8:0d:13:0b:98:85:10:9d:4b:
06:3f:23:2b:1d:1f:5b:63:88:6e:f7:69:d7:d0:cb:
d2:b4:e3:c3:54:ae:75:bc:4b:9d:be:85:dd:a9:2b:
c0:91:99:df:2c:a6:36:c3:03:d3:a5:0d:9c:8b:3f:
eb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:20:C7:0C:70:5B:B7:2E:1C:56:3B:1D:07:FE:AE:B3:03:F8:EE:8E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AyDHDHBbty4cVjsdB_6uswP47o4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.32.0/24
163.5.105.0-163.5.106.255
163.5.115.0/24
163.5.118.0/23
163.5.121.0/24
163.5.153.0/24
163.5.159.0/24
163.5.168.0/24
163.5.212.0/24
163.5.215.0/24
163.5.220.0/24
163.5.225.0/24
163.5.229.0/24
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
50:6e:23:75:50:ce:3e:8f:0e:e1:84:dc:35:a2:3d:8a:21:a5:
0a:4c:6e:82:11:91:38:96:d0:8b:78:14:d1:12:04:09:60:fd:
89:77:af:d1:dc:f9:80:cc:db:70:81:5f:e3:b7:41:bf:2f:91:
c8:f7:5c:2c:9a:74:12:d0:1e:5f:e7:b8:8c:b6:be:37:f5:a2:
ee:1a:9e:bd:ef:77:72:24:60:c7:a5:b4:52:c0:43:e0:01:b0:
48:3b:d2:c2:8c:a8:06:98:25:68:e3:b9:36:5d:8d:c2:77:fe:
d7:9b:86:69:1a:54:25:a5:76:7d:4d:a0:b7:c2:ed:3d:80:da:
e2:44:aa:27:4e:6e:db:0c:5d:60:7c:70:be:67:d9:ec:76:c7:
ad:b9:16:00:40:13:11:6b:35:cb:95:0d:7d:a4:5c:c8:58:88:
d7:8b:41:be:32:0f:ad:7b:0d:86:27:a1:0a:39:a8:51:08:ff:
33:9c:62:fd:89:9c:11:5e:de:71:5a:0e:de:71:2d:8d:4c:9d:
df:ac:16:aa:69:d8:86:e8:08:cb:5b:fb:db:38:cd:26:8f:b1:
df:3c:fb:7e:73:45:db:24:df:81:82:0b:e7:58:63:ab:3c:d4:
84:3d:e1:70:60:7e:41:70:6b:0d:bf:bf:f0:48:e4:28:38:63:
d7:33:95:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org